Behavioral task
behavioral1
Sample
Password cracker.exe
Resource
win10v2004-20241007-en
General
-
Target
Password cracker.exe
-
Size
78KB
-
MD5
a2d98167d1ad7f67b00c11d092ae9b2c
-
SHA1
d9a0e16ba8af29dfadc42a77c8f3d56aa2ed0dcc
-
SHA256
afc5e65ac31663013e7efab4921f5a8311353e71b421b0b1ab2f663bfd34ff85
-
SHA512
0d0c131a44b4efb17df2caf5351ff6c2b215b123a890b93fc3d1a2bb301f188483ba17648bc988215975be23bcc818ee4b3d31dffd19015685dcb3c9e49cb6c9
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+IPIC:5Zv5PDwbjNrmAE+MIC
Malware Config
Extracted
discordrat
-
discord_token
MTI4ODkzMDY2OTc0NTAxMjc0Nw.G3JLXp.6QmxjyawVfrC6pnYIXqBIPzcGjCXEiheg7SMHA
-
server_id
1288929253651386379
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Password cracker.exe
Files
-
Password cracker.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ